Valid 1Z0-820 Dumps shared by ExamDiscuss.com for Helping Passing 1Z0-820 Exam! ExamDiscuss.com now offer the newest 1Z0-820 exam dumps, the ExamDiscuss.com 1Z0-820 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 1Z0-820 dumps with Test Engine here:
Consider the following rule file for use with the Basic Audit Reporting Tool (BART). CHECK all IGNORE dirmtime /etc/security /etc/notices IGNORE contents /export/home IGNORE mtime size contents /var CHECK You are using BART to detect inappropriate changes to the file system. Identify the two correct statements describing the attributes recorded.
Correct Answer: D,F
Explanation/Reference: D: According to line /etc/security F: According to line /export/home Not E: According to line IGNORE dirmtime Note: In default mode, the bart compare command, as shown in the following example, checks all the files installed on the system, with the exception of modified directory timestamps (dirmtime): CHECK all IGNORE dirmtime Note 2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you to comprehensively validate systems by performing file-level checks of a system over time. By creating BART manifests, you can easily and reliably gather information about the components of the software stack that is installed on deployed systems. BART is a useful tool for integrity management on one system or on a network of systems. Reference: Oracle Solaris Administration: Security Services, BART Manifests, Rules Files, and Reports (Reference)